HKDF updates

- prevent fixed-digest HKDF from having its digest changed
- implement gettable params in HKDF
- update fixed-digest HKDF tests

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/27247)
This commit is contained in:
Daniel Van Geest
2025-04-07 12:21:47 +01:00
committed by Pauli
parent 2671a68a27
commit c6a1d8ea74
11 changed files with 260 additions and 150 deletions

View File

@@ -112,7 +112,7 @@ OpenSSL 3.6
*Dimitri John Ledkov*
* HKDF with (SHA-256,SHA-384,SHA-512) has assigned OIDs. Added ability to load
* HKDF with (SHA-256, SHA-384, SHA-512) has assigned OIDs. Added ability to load
HKDF configured with these explicit digests by name or OID.
*Daniel Van Geest (CryptoNext Security)*